SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:1304-1)

bind was updated to fix one security issue. This security issue was fixed : - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packe...

SUSE-SU-2015:1316-1 Security update for bind

bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet...

SUSE-SU-2015:1305-1 Security update for bind

bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet...

UBUNTU-CVE-2015-3227

The 1 jdom.rb and 2 rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service SystemStackError via a large XML document depth...

CVE-2015-1788

OpenSSL CVE-2015-1788 affects BN_GF2m_mod_inv in bn_gf2m.c and occurs when ECParameters specify a curve over a malformed binary polynomial field. This can allow a remote attacker to cause a denial-of-service (infinite loop) on a server or client that uses Elliptic Curve algorithms. The issue is f...

CVE-2015-0189

The CVE-2015-0189 entry affects IBM WebSphere MQ: cluster repository manager in MQ versions 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allows remote authenticated admins to cause a denial of service via triggering multiple transmit-queue records, causing memory overwrite and daemon outage. Documen...

MGASA-2015-0231 Updated php packages fix security vulnerabilities

Updated php packages fix security vulnerabilities: Memory Corruption in pharparsetarfile when entry filename starts with null CVE-2015-4021. Integer overflow in ftpgenlist resulting in heap overflow, potentially exploitable by a hostile FTP server CVE-2015-4022. PHP Multipart/form-data parsing...

php -- multiple vulnerabilities

PHP development team reports: Fixed bug 69364 PHP Multipart/form-data remote DoS Vulnerability. CVE-2015-4024 Fixed bug 69418 CVE-2006-7243 fix regressions in 5.4+. CVE-2015-4025 Fixed bug 69545 Integer overflow in ftpgenlist resulting in heap overflow. CVE-2015-4022 Fixed bug 68598 pcntlexec...

Kaspersky: Apple iOS and the Mac system vulnerabilities can lead to remote DoS（denial of services attacks-vulnerability warning-the black bar safety net

Kaspersky researchers in Apple OS X and iOS operating systems open source component Darwin kernel found a loophole Darwin Nuke it. The vulnerability can lead to OS X 10.10 and iOS 8 The device is subjected to a remote DoS attack, damage the user equipment, and the networked enterprise network...

CVE-2015-0677

The CVE-2015-0677 issue affects Cisco ASA Software: the XML parser in ASA web/VPN components can be triggered by a crafted XML document to cause a denial of service (VPN outage or device reload). Affected versions include ASA 8.4 up to 8.4(7.28), 8.6 up to 8.6(1.17), 9.0 up to 9.0(4.33), 9.1 up t...

CVE-2015-0645

Cisco IOS XE Layer 4 Redirect (L4R) DoS vulnerability affects IOS XE 2.x–3.x before certain fixed releases, where the L4R feature mishandles crafted IPv4/IPv6 packets. An unauthenticated, remote attacker can trigger a device reload by sending malformed traffic, per Bug ID CSCuq59131. Affected ran...

SUSE-SU-2015:0679-1 Security update for tcpdump

tcpdump was updated to fix five vulnerabilities in protocol printers When running tcpdump, a remote unauthenticated user could have crashed the application or, potentially, execute arbitrary code by injecting crafted packages into the network. The following vulnerabilities were fixed: IPv6 mobili...

CVE-2015-0654

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...

FreeBSD : rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities (d08f6002-c588-11e4-8495-6805ca0b3d42)

Best Practical reports : RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...

CVE-2015-1545

The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in a search request...

MatrikonOPC Server for DNP3 < 1.2.3.1 Message Handling Remote DoS

Binary data scadamatrikonopcdnp3serverdos.nbin...

CVE-2015-1463

CVE-2015-1463 affects ClamAV prior to 0.98.6. A remote attacker can crash the daemon by feeding a specially crafted petite packer file, due to an issue described as an “incorrect compiler optimization.” The vulnerability is demonstrated in the CVE entry for ClamAV, and several advisories referenc...

Openswan < 2.6.37 Cryptographic Helper Use-After-Free Remote DoS

The remote host is running a version of Openswan prior to version 2.6.37. It is, therefore, affected by a remote denial of service vulnerability due to a use-after-free flaw in the cryptographic helper handler. A remote attacker can exploit this issue to cause a denial of service. C Tenable Netwo...

Juniper Junos MX Series BBE Routers jpppd Remote DoS (JSA10665)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the Juniper PPP daemon jpppd. A remote attacker can exploit this issue by sending a specially crafted PAP Authenticate-Request after successful negotiation of the PPP...

Apache Traffic Server HTTP TRACE Request Remote DoS Vulnerability

Apache Traffic Server is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...